Re: RSA SecurID

["Mclaughlin, Kevin (mclaugkl)" <mclaugkl () UCMAIL UC EDU>]

Hi Chris:
A member of our local CSO roundtable, the CSO from the E.W. Scripps company, gave a presentation on a two factor 
product called Phone Factor.  We are starting our evaluation of the product now but it seems to be much cheaper than 
other hardware (token) solutions and it is pretty slick in how it works.  The downside is that the person logging in 
has to have a phone number on file, and be near that phone, that the authentication server can call.   Basically you 
login and then the server calls your number and ask you to push the pound key.  You push the pound key and you are 
authenticated.  E.W. Scripps runs Juniper’s VPN and says it ties in nicely with that product as well.
I don’t have any first-hand knowledge as yet but will send you some of the data points once we gather them.
Note – When I was at  Procter & Gamble we used RSA’s token solution and were very happy with that but it tended to be a 
bit expensive for the infrastructure.
-Kevin


Kevin L. McLaughlin
MS,CISM, CISSP, GLSC, PMP, ITIL Manager Certified
Director, Information Security
University of Cincinnati

From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of 
Christopher Jones
Sent: Wednesday, September 24, 2008 1:05 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] RSA SecurID

We are currently investigating two-factor authentication via RSA's SecurID appliance solution.  Initially, it may be 
just for IT in order to manage privileged access.  Eventually, it could be extended to other employees.  Has anyone 
recently implemented this?  If so, what was the scope of the implementation (IT staff only, employees, everyone)?  Any 
feedback concerning this would be welcomed and appreciated.  Thanks.




Regards,
Christopher Jones
IT Security Administrator
Information Technology Services
University of the Fraser Valley
33844 King Road
Abbotsford, BC  V2S 7M8
604.854.4566
Christopher.Jones () ufv ca<mailto:Christopher.Jones () ufv ca>

[cid:image001.png@01C91E4F.20975C90]